forked from pool/tpm2.0-tools
Matthias Gerstner
d61e6c9bf0
- update to version 2.1.1 * Potential memory leak fix when tcti/sapi initialization fails. * tpm2_listpcrs: use TPM2_GetCapability to determine PCRs to read * listpcrs: remove one redundant call to tpm get cap * listpcrs: fix for unsupported/disabled alg in -L * build: use supported comment to suppress GCC7 fallthrough warning * kdfa: allow to build with OpenSSL 1.1.x (bsc#1067392) - drop patches (upstream) * 0001-tpm2_listpcrs-use-TPM2_GetCapability-to-determine-PC.patch * tpm2.0-tools-fix-gcc7.patch OBS-URL: https://build.opensuse.org/request/show/540183 OBS-URL: https://build.opensuse.org/package/show/security/tpm2.0-tools?expand=0&rev=30
137 lines
5.8 KiB
Plaintext
137 lines
5.8 KiB
Plaintext
-------------------------------------------------------------------
|
|
Thu Nov 9 11:00:33 UTC 2017 - vcizek@suse.com
|
|
|
|
- update to version 2.1.1
|
|
* Potential memory leak fix when tcti/sapi initialization fails.
|
|
* tpm2_listpcrs: use TPM2_GetCapability to determine PCRs to read
|
|
* listpcrs: remove one redundant call to tpm get cap
|
|
* listpcrs: fix for unsupported/disabled alg in -L
|
|
* build: use supported comment to suppress GCC7 fallthrough warning
|
|
* kdfa: allow to build with OpenSSL 1.1.x (bsc#1067392)
|
|
- drop patches (upstream)
|
|
* 0001-tpm2_listpcrs-use-TPM2_GetCapability-to-determine-PC.patch
|
|
* tpm2.0-tools-fix-gcc7.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Aug 21 14:32:13 UTC 2017 - matthias.gerstner@suse.com
|
|
|
|
- update to version 2.1.0:
|
|
- dropped 0002-kdfa-use-openssl-for-hmac-not-tpm.patch, was backported
|
|
upstream in commit 788a17abbe0000c560935ef9f31c9a6892d9ea33
|
|
- this version now can interact with the new resource manager tpm2.0-abrmd
|
|
- Upstream changes:
|
|
* Fix readx and writex on multiple EINTR returns.
|
|
* Add support for the tabrmd TCTI. This is the new default.
|
|
* Change default socket port from 2323 (the old resourcemgr) to 2321
|
|
(default simulator port).
|
|
* Cherry-pick fix for CVE-2017-7524.
|
|
* Fix tpm2_listpcr command line option handling.
|
|
* Fix tpm2_getmanufec memory issues.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jul 20 13:50:28 UTC 2017 - matthias.gerstner@suse.com
|
|
|
|
- added the new abrmd package to recommends, because the tools will otherwise
|
|
not function
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jun 29 09:45:45 UTC 2017 - matthias.gerstner@suse.com
|
|
|
|
- 0002-kdfa-use-openssl-for-hmac-not-tpm.patch: fixed unexpected leak of
|
|
cleartext password into the tpm when generating an HMAC in the context of
|
|
tpm_kdfa() (key derivation function) (bnc#1046402, CVE-2017-7524)
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jun 20 08:35:29 UTC 2017 - matthias.gerstner@suse.com
|
|
|
|
- 0001-tpm2_listpcrs-use-TPM2_GetCapability-to-determine-PC.patch: fixed
|
|
tpm2_listpcrs aborting saying "too much pcrs to get!" (bnc#1044419)
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jun 2 07:16:45 UTC 2017 - meissner@suse.com
|
|
|
|
- tpm2.0-tools-fix-hardening.patch: do not disable fortify,
|
|
do not use -Wstack-protector as it warns also for non-utilized
|
|
functions and then -Werror fails.
|
|
- tpm2.0-tools-fix-gcc7.patch: fixed gcc7 case fallthrough errors
|
|
|
|
-------------------------------------------------------------------
|
|
Wed May 10 11:52:40 UTC 2017 - matthias.gerstner@suse.com
|
|
|
|
- Major update to 2.0.0
|
|
- dropped fixes.patch, now part of the upstream version
|
|
- a set of man pages have been added to the package
|
|
- Upstream changes:
|
|
* Tracked on the milestone: https://github.com/01org/tpm2.0-tools/milestone/2
|
|
* Reworked all the tools to support configurable TCTIs, based on build time
|
|
configuration, one can specify the tcti via the --tcti (-T) option to all
|
|
tools.
|
|
* tpm2_getrandom interface made -s a positional argument.
|
|
* Numerous bug fixes.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 6 16:23:15 UTC 2017 - meissner@suse.com
|
|
|
|
- buildrequire pkgconfig
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Mar 1 15:33:46 UTC 2017 - meissner@suse.com
|
|
|
|
- Updated to 1.1.0 / 016-11-04 (FATE#321509)
|
|
- Added
|
|
* travis ci support.
|
|
* Allow for unit tests to be enabled selectively.
|
|
* tpm2_rc_decode tool: Decode TPM_RC error codes.
|
|
* Android Make file
|
|
* tpm2_listpersistent: list all persistent objects
|
|
* test scripts for tpm2-tools
|
|
* tpm2_nvreadlock
|
|
* tpm2_getmanufec: retrieve EC from tpm manufacturer server.
|
|
* Copy 'common' and 'sample' code from the TPM2.0-TSS repo.
|
|
|
|
- Modified
|
|
* tpm2_takeownership: update option -c to use lockout password to clear.
|
|
* tpm2_listpcrs: add options -L and -s, rewrite to increase performance.
|
|
* tpm2_quote: added -L option to support selection of multiple banks.
|
|
* tpm2_quote: add -q option to get qualifying data.
|
|
* configure: Use pkg-config to get info about libcurl and libcrypto.
|
|
* configure: Use pkg-config to locate SAPI and TCTI headers / libraries.
|
|
* tpm2_x: Add -X option to enable password input in Hex format.
|
|
* tpm2_nvdefine: Change -X option to -I.
|
|
* tpm2-nvwrite: fix for unable to write 1024B+ data.
|
|
* tpm2_getmanufec: Fix base64 encoding.
|
|
* tpm2_x: fixed a lot of TPM2B failures caused by wrong initialization.
|
|
* tpm2_getmanufec: let configure handle libs.
|
|
* tpm2_getmanufec: Convert from dos to unix format.
|
|
* build: Check for TSS2 library @ configure time.
|
|
* build: Detect required TSS2 and TCTI headers.
|
|
* build: Use libtool to build the common library
|
|
* build: Install all binaries into sbin.
|
|
* build: Build common sources into library.
|
|
* build: Move all source files to 'src'.
|
|
* Makefile.am: Move all build rules into single Makefile.am.
|
|
* everything: Use new TCTI headers and fixup API calls.
|
|
* everything: Update source to cope with sapi header cleanup.
|
|
* tpm2_activatecredential: Updated to support TCG compatible EK
|
|
* tpm2_getpubak: Updated to use TCG compatible EK
|
|
* tpm2_getpubek: fix ek creation to follow TCG EK profile spec.
|
|
|
|
- Removed
|
|
* Windows related code
|
|
* depenedency on the TPM2.0-TSS repo source code
|
|
|
|
- 1.0-alpha_0.zip: removed, use tpm2-0-tss directly.
|
|
- tpm2-install-binaries.patch: not needed anymore.
|
|
- fixes.patch: fixed random return build errors.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Aug 22 12:02:01 UTC 2016 - meissner@suse.com
|
|
|
|
- update description
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 24 12:42:04 UTC 2016 - meissner@suse.com
|
|
|
|
- initial import of tpm2.0-tools
|
|
|